Privacy Policy – Western Heritage Australia

Last Updated: August 8, 2025

Western Heritage Australia (WHA) is a not-for-profit discussion and study group dedicated to raising Western political and cultural consciousness and fostering creative social change through Round Table Forums and other initiatives. We value the dignity, liberty, and privacy of each individual and are committed to protecting your personal information in accordance with the Privacy Act 1988 and the Australian Privacy Principles (APPs). This Privacy Policy explains how we collect, use, disclose, store, and protect information when you visit our website, Western Heritage Australia (“Website”), which uses WP Statistics (free version) for analytics and Wordfence (free version) for security, and how we manage subscriber information via MailChimp and event registrations via Eventbrite.

1. Who We Are: Western Heritage Australia (WHA) has no affiliations with any political, business, social, or religious organisations. All funds are used for printed and online information and public meetings. Our mission is to promote nation, family, culture, individuality, and moral integrity through our activities.

2. Information We Collect: We collect limited information to operate our Website, improve user experience, secure our platform, and communicate with subscribers. The types of information we collect are:

2.1 Website Analytics Data (via WP Statistics): We use the free version of WP Statistics, a privacy-friendly analytics plugin, to understand how visitors interact with our Website. WP Statistics collects the following non-personal information:

Visitor Statistics: Number of visitors per day, page views, and specific pages or posts accessed.
Device and Browser Information: Anonymised data such as browser type, device type, and operating system.
Referral Information: The website or search engine (e.g., Google) that directed you to our Website, if applicable.

WP Statistics does not use cookies or store IP addresses for analytics, ensuring no personal information is collected. All data is stored locally on our WordPress database and is not shared with third parties.2.2 Security-Related Data (via Wordfence)We use the free version of Wordfence to protect our Website from security threats. Wordfence may collect:

IP Addresses: Temporarily logged to detect and block malicious activities (e.g., brute force attacks, malware scans). These are anonymised or deleted after 30 days (or as configured) and are not used for analytics.
Login and Access Data: If you use login features or leave comments (if enabled), Wordfence may log timestamps, user agents, or failed login attempts to prevent unauthorised access.
User-Provided Information: If you submit information via comments or contact forms (if enabled), such as your name or email address, this is collected only with your consent.

2.3 Subscriber Information (via MailChimp): We use MailChimp to manage our subscriber database and send newsletters and updates about WHA initiatives. If you subscribe to our mailing list, we collect:

Personal Information: Your name and email address, provided voluntarily when you sign up.
Engagement Data: Information about how you interact with our emails (e.g., open rates, clicks), as processed by MailChimp to improve our communications.

MailChimp’s data practices are governed by its own Privacy Policy. We ensure compliance with APP 8 (cross-border disclosure) by using MailChimp’s Standard Contractual Clauses for data transfers outside Australia.

2.4 Event Registration Data (via Eventbrite): We use Eventbrite for event registrations and to inform subscribers about upcoming events. When you register for a WHA event through Eventbrite, you may provide:

Personal Information: Your name, email address, and other details required for event attendance, as collected by Eventbrite.
Event Data: Information about the events you register for or attend.

Eventbrite’s data practices are governed by its own Privacy Policy. We do not store event registration data on our Website; all such data is managed by Eventbrite.

2.5 Comments (If Enabled): If you leave a comment on our Website, we collect:

Comment Data: The data shown in the comment form (e.g., name, email address, comment content).
IP Address and Browser User Agent: Temporarily collected to detect spam via an automated spam detection service (e.g., Akismet, if enabled). These are not used for analytics and are deleted after a short period (typically 30 days).

2.6 Embedded Content from Other Websites: Articles on our Website may include embedded content (e.g., videos, images) from third-party websites (e.g., YouTube). These websites may collect data about you, use cookies, or track your interaction with the content, as outlined in their respective privacy policies. We do not control these third-party practices. We only collect information necessary for the purposes outlined below, in line with APP 3 (collection of personal information).

3. How We Use Your Information: We use the collected information for the following purposes:

Analytics: To analyse Website usage (e.g., daily visitor counts, page views, popular content) to improve our Website and content (via WP Statistics).
Security: To protect our Website from threats like hacking or unauthorised access using Wordfence’s firewall, malware scanning, and login protection features.
Communication: To send newsletters, updates, and information about WHA initiatives or events via MailChimp, with your consent.
Event Management: To facilitate event registrations and communications via Eventbrite, as governed by Eventbrite’s Privacy Policy.
User Interaction: To display comments or respond to inquiries submitted via contact forms (if enabled).

We do not use your information for marketing beyond our stated purposes or share it with third parties except as described below.

4. Legal Basis for Data Collection: We collect and process information under the Privacy Act 1988 and APPs:

Where it is necessary for our legitimate interests in operating, improving, and securing our Website and communicating with subscribers, provided it does not override your privacy rights.
Where you have provided explicit consent (e.g., by subscribing to our MailChimp list, registering for events via Eventbrite, or submitting comments).
To comply with legal obligations, such as maintaining Website security or responding to legal requests.

5. Data Storage and Security: All analytics data (WP Statistics) and security data (Wordfence) are stored 5. Data Storage and Security. All analytics data collected by WP Statistics (e.g., visitor counts, page views) and security data collected by Wordfence (e.g., temporary IP logs) are stored locally in our WordPress database, hosted on GoDaddy’s servers. GoDaddy uses high-performance NVMe Solid State Drives (SSDs) for fast and reliable data storage, with servers typically located in the Asia-Pacific region (e.g., Singapore) for Australian customers to optimise performance. Subscriber data (names and emails) is stored securely in MailChimp, and event registration data is managed by Eventbrite. We take reasonable steps to protect your information, as required by APP 11 (security of personal information), including:

Using WP Statistics’ cookieless tracking and disabling IP storage for analytics to minimise data collection.
Configuring Wordfence to limit IP retention (e.g., deleting logs after 30 days) and using its firewall and malware scanning features to protect against threats.
Ensuring MailChimp and Eventbrite comply with data protection standards via their respective privacy policies and contractual agreements, including Standard Contractual Clauses for cross-border transfers.
Implementing server-level security through GoDaddy, including SSL encryption, daily backups, automatic WordPress updates, 24/7 network monitoring, and DDoS protection to ensure fast, secure, and reliable hosting.

No system is completely secure, but we strive to protect your data. Contact us if you have security concerns.

6. Data Sharing and Disclosure: We do not sell or transfer your information to third parties, except as follows:

MailChimp: Subscriber names and email addresses are processed by MailChimp for newsletters and updates, as outlined in their Privacy Policy.
Eventbrite: Event registration data is processed by Eventbrite, as outlined in their Privacy Policy.
Legal Obligations: We may disclose data if required by law (e.g., court orders), in compliance with APP 6 (use or disclosure).
Service Providers: Our hosting provider or technical service providers may access server data for maintenance, but they are bound by confidentiality agreements and do not process analytics or security data for other purposes.

WP Statistics and Wordfence (free versions) do not share data with third parties for analytics or security purposes.

7. Cross-Border Data Transfers: MailChimp and Eventbrite may store or process data outside Australia (e.g., in the United States). Both services use Standard Contractual Clauses or equivalent safeguards to comply with APP 8 (cross-border disclosure). Our Website’s analytics and security data (via WP Statistics and Wordfence) are stored locally in [Insert Hosting Location], minimising cross-border transfers.

8. Your Rights: Under the APPs, you have rights regarding your personal information:

Access (APP 12): Request access to personal information we hold (e.g., subscriber data in MailChimp, comments, or temporary security logs).
Correction (APP 13): Request correction of inaccurate or incomplete personal information.
Unsubscribe: Opt out of MailChimp newsletters by clicking the “unsubscribe” link in any email.
Deletion: Request deletion of personal data (e.g., comments, subscriber information), except where we are required to retain it for legal or administrative purposes.
Complaints: Lodge a complaint with us or the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au if you believe we have breached the APPs.

WP Statistics analytics data is anonymous and not linked to individuals. For MailChimp or Eventbrite data, refer to their respective privacy policies for additional rights.

9. Data Retention

Analytics Data: WP Statistics data (e.g., visitor counts, page views) is retained for 180 days or until pruned to maintain Website performance. This data is anonymous.
Security Data: Wordfence IP addresses and security logs are deleted after 30 days (or as configured).
Subscriber Data: MailChimp retains your name and email address until you unsubscribe or request deletion.
Event Data: Eventbrite retains registration data per its Privacy Policy.
Comments: If enabled, comments and metadata are retained indefinitely for moderation purposes unless you request deletion.

We retain data only as long as necessary, per APP 11.

10. Cookies and TrackingWP Statistics does not use cookies for analytics. Wordfence may use session cookies for security (e.g., login protection), which expire when you close your browser. Embedded content from third-party websites (e.g., YouTube videos) may use cookies or tracking, governed by those sites’ privacy policies. We do not use tracking cookies for analytics.

11. Third-Party Links and Services: Our Website may link to third-party websites or embed content (e.g., videos). These sites, including MailChimp and Eventbrite, have their own privacy policies, which you should review. We are not responsible for their practices.

12. Changes to This Privacy Policy: We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be posted on our Website with an updated “Last Updated” date. Please check this page periodically.

13. Contact Us: For questions, concerns, or to exercise your rights under the APPs, contact us at: Western Heritage Australia, email: contact AT westernheritage.org.au which is encouraged as the first port of call.
You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.